Microsoft OAuth2 won't fetch mail

yannickb

I'am trying to configure osTicket v1.17.4 with an Microsoft 365 email.
I have configured the OAuth2, I can send email from Email>Diagnostic menu without problem.
But osTicket are not able to fetch mail.
On my server where ISS run, I have a scheduled task that run every 5 minutes.
In the Dashboard>System Logs, I see an entry each time the scheduled task run, but there are no error.

Does someone can help me ?
Thank you

KevinTheJedi

yannickb

When you go to Remote Mailbox tab, click Config, and click the Token tab does the Resource Owner match the email you are trying to fetch from?

Cheers.

ramrajone

yannickb
Please review the Azure logs to verify whether your support system is accessing the account.
As part of our policy, passwords need to be changed every x months, requiring re-authentication during that time.
Additionally, consider restarting the web service as a troubleshooting step, it may fix your issue

yannickb

KevinTheJedi
Yes, the Resource Owner match the email, but the token are expired.
If I delete it, and save OAuth2 configuration, a new token a taken that expire 1 hour later and the token seem to never renewed

KevinTheJedi

yannickb

That is very strange. Maybe you didn’t configure the App Registration correctly?

Cheers.

yannickb

KevinTheJedi
I have followed this guide : https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html

ramrajone
Where I can find Azure logs ?

Thank you

KevinTheJedi

yannickb

People have said that before and still didn't actually follow all the steps so..

Have you tried IMAP instead of POP3?

Cheers.

ramrajone

yannickb
Logs are at https://portal.azure.com/#view/Microsoft_AAD_UsersAndTenants/UserManagementMenuBlade/~/SignIns

You can filter just your support user id or name:

You can check this post: https://howtohelpdesk.com/how-to-get-basic-authentication-azure-ad-sign-in-log/

yannickb

KevinTheJedi
I have double check my configuration and it's the same as the guide
I cannot test IMAP, the user have an 'Exchange Kiosk' licence, so there are no IMAP access.
I have a 'Microsoft 365 Business Basic' licence available, I have tested with this licence and it doesn't work.

ramrajone
I also checked the logs, I see connection when saving the OAuth2 configuration, but nothing when scheduled task run or when sending email from 'Diagnotic' menu in osTicket

KevinTheJedi

yannickb

Well the settings you showed above should be all that is needed (ie. outlook.office365.com + 995 + POP). Are you positive you don't see any Mail Fetcher errors in the system logs? Have you checked your other logs (general server logs, webserver error logs, PHP error logs, MySQL/MariaDB error logs, etc.) for any related errors?

Maybe run cron manually to see if it outputs any errors? Or output cron results to a file and see.

Cheers.

KevinTheJedi

yannickb

Stupid question: Did you enable Email Fetching under Admin Panel > Emails > Settings?

Cheers.

yannickb

KevinTheJedi
No error anywhere

Nothing when running cron manually

KevinTheJedi
The email fetching was not enabled !
I use osTicket since so many years that I forget to setup this option in my lab environment.
I just enabled email fetching in the Admin > Emails > Emails...